About Clientless and Universal Zero Trust Network Access

Zero Trust Access (ZTNA) is a general name for process that protect internal resources with identity-based access (including user trust and posture), and can provide intrusion protection, file, and malware protection.

Zero Trust Access is further divided into the following:

• Clientless ZTNA enables you to authenticate and authorize access to protected web based resources and applications from inside (on-premises) or outside (remote) the network using an external Security Assertion Markup Language (SAML) identity provider (IdP) policy. Use clientless ZTNA for remote users.

• Universal ZTNA provides identity-based network protection and can be used with both remote and on-premises users. On-premises users access a trusted network using a Secure Firewall Threat Defense while remote users install an application like Cisco Secure Client.